discovery.fileGet

discovery.fileGet(target, filename [,win64_redirect=true|false])

The function takes the following parameters:

• target, where target is:
  • a node used to identify the discovery target, either a directly discovered data node, or a Host node. Requires PRIV_CAT to be defined to retrieve files not readable by the current user. Or,
  • a data source against which the request is performed. See also, discovery.dataSource.
• filename – the name of the file on which to return information.
• win64_redirect is an optional flag which enables you to specify whether the search for the file should take place in the 32 bit directory if not found in the 64 bit directory. TRUE means search the 32 bit directory, FALSE means do not search the 32 bit directory if the file is not found in the 64 bit directory. The default is TRUE.

64 bit Windows hosts have the following system directories for holding executables, DLLs, and so forth:

• %windir%\system32 — 64 bit executables and DLLs
• %windir%\SysWOW64 — 32 bit executables and DLLs

Filenames that do not start with %windir%\system32 or %systemroot%\system32 are never checked for redirection.

On non-Windows and 32 bit Windows systems win64_redirect has no effect.

Returns a DiscoveredFile node.

The target node can be one of the following:

• Host
• DiscoveryAccess
• DiscoveredDirectoryEntry
• DiscoveredFQDN
• DiscoveredHBA
• DiscoveredListeningPort
• DiscoveredNetworkConnection
• DiscoveredNetworkInterface
• DiscoveredProcess
• DiscoveredSNMPRow
• DiscoveredWMI
• SQLResultRow
• DirectoryListing
• DiscoveredPackages
• DiscoveredSNMPTable
• DiscoveredWMIQuery
• FQDNList
• HBAInfoList
• IntegrationResult
• InterfaceList
• NetworkConnectionList
• ProcessList
• DeviceInfo
• DiscoveredCommandResult
• DiscoveredFile
• DiscoveredPatches
• DiscoveredRegistryValue
• DiscoveredSNMP
• HostInfo